Kenya: Office of the Data Protection Commissioner fined Oppo Kenya KES 5 million for breaches of data protection regulations

On 21 December 2022, the Office of the Data Protection Commissioner (ODPC) in Kenya issued a penalty notice against Oppo Kenya, imposing a fine of KES 5 million pursuant to Section 63 of the Data Protection Act, and Regulation 20 of the Data Protection (Complaints Handling Procedure and Enforcement) Regulations. This action followed Oppo Kenya's non-compliance with an enforcement notice issued on 3 November 2022, which was prompted by the company's unauthorised use of a complainant's photo on its Instagram account (stories) without consent.